Microsoft Sign In

Microsoft Sign In

Accessing the Google Sign-In Settings

You can access the main KC:Web Settings by going to “KC:Web Settings” -> “Available Options” on the left-hand menu.

Then click on the "Sign In" tab to switch to view all of the available sign in plugins.

You will then need to click on the “Microsoft Sign In” tab to switch the view to the options for this plugin.
 

Available Options

Enabled?: Select whether the Microsoft Sign-in functionality should be enabled on the site.

Microsoft Client ID: Enter the Client ID for the application setup within Microsoft Azure.

Microsoft Tenant ID: Enter the Tenant ID for the application setup within Microsoft Azure.

Microsoft Secret: Enter the Secret for the application setup within Microsoft Azure.

 

Microsoft Azure

For Microsoft Sign-in to work correctly an application will need to be setup in Microsoft Azure.

You can find out more information on how to setup an application here: https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app

When setting the "Supported account types" option you will need to set it to "Any Entra ID Tenant + Personal Microsoft accounts" so that all Microsoft accounts can sign in to it.

Under "Authentication" you will need to setup a "Redirection URI" so that the customer is redirected back to the correct URL when they trigger the sign-in attempt. You will need to select "Web" as the type and then enter the URL as your website's base URL followed by "/account/microsoft-auth/", for example "https://www.website.com/account/microsoft-auth/".

Accounts

If a customer registers an account using Microsoft Sign-In their email address and name will be taken from the data provided by Microsoft, but they will need to enter the rest of their details. The password field will not be available as this is pre-set to a unique code that the website can re-create when handling log ins from Microsoft accounts.

If a Microsoft customer resets their password, the Microsoft Sign-in functionality will no longer work for them, as they will no longer have the pre-set password, and they will need to use the standard log in functionality